CVE-2015-8987

McAfee Agent (MA) for non-Mac OS, version 4.8.0 patch 2 and earlier, is affected by a MitM vulnerability that lets an attacker cause a MA instance to communicate with a rogue ePO server via migration to another ePO server. The OpenVAS entry and NVD record corroborate the MITM impact but do not pr...

CVE-2016-8024

The CVE-2016-8024 entry affects McAfee VirusScan Enterprise for Linux (VSEL) 2.0.3 and earlier. The vulnerability is HTTP Response Splitting caused by improper neutralization of CRLF sequences in HTTP headers, enabling a remote unauthenticated attacker to influence server responses and potentiall...

CVE-2016-8011

Cross-site scripting vulnerability in Intel Security McAfee Endpoint Security ENS Web Control before 10.2.0.408.10 allows attackers to inject arbitrary web script or HTML via a crafted web site...

CVE-2013-7462

The CVE-2013-7462 entry describes a directory traversal vulnerability in McAfee/SCC Platform prior to patch 1070 (6.14) and prior to patch 1076 (6.15). An unauthenticated user could view contents of arbitrary system files that lacked file-system read restrictions via a null-byte injection exploit...

CVE-2016-8019

CVE-2016-8019 is an XSS vulnerability in Intel Security VirusScan Enterprise Linux (VSEL) 2.0.3 and earlier. The issue affects the web interface where user input passed through tplt parameters (notably info:7/info:5 in NailsConfig.html or MonitorHost.html) can be crafted by an unauthenticated rem...

CVE-2016-8017

CVE-2016-8017 is a concrete vulnerability in McAfee VirusScan Enterprise for Linux (VSEL) up to version 2.0.3 where the web interface handles special elements (tplt) in user input, enabling an authenticated remote attacker to read files on the webserver. The underlying issue is a Special Element ...

CVE-2015-8986

CVE-2015-8986 is described as a sandbox-detection evasion vulnerability in McAfee/Intel Security Advanced Threat Defense (MATD) versions up to 3.4.2.32. The issue allows malware to detect the sandbox environment and bypass malware detection, resulting in false negatives. The available sources ide...

CVE-2015-8990

Detection bypass vulnerability in Intel Security Advanced Threat Defense ATD 3.4.6 and earlier allows malware samples to bypass ATD detection via renaming the malware...

CVE-2015-8989

McAfee Vulnerability Manager (MVM) – Enterprise Manager web portal is affected by CVE-2015-8989. The vulnerability stems from unsalted passwords stored for user accounts, enabling attackers to brute-force passwords against the MVM database. Affected: McAfee Vulnerability Manager prior to version ...

CVE-2016-8020

Improper control of generation of code vulnerability in Intel Security VirusScan Enterprise Linux VSEL 2.0.3 and earlier allows remote authenticated users to execute arbitrary code via a crafted HTTP request parameter...

CVE-2016-8025

SQL injection vulnerability in Intel Security VirusScan Enterprise Linux VSEL 2.0.3 and earlier allows remote authenticated users to obtain product information via a crafted HTTP request parameter...

CVE-2015-8992

The CVE-2015-8992 entry applies to Intel Security WebAdvisor versions before 4.0.2, 4.0.1 and 3.7.2 . The vulnerability arises from a flaw that allows a crafted malware payload to be executed during installation or uninstallation, making the product momentarily vulnerable. The issue does not affe...

CVE-2017-3899

SQL injection vulnerability in Intel Security Advanced Threat Defense ATD Linux 3.6.0 and earlier allows remote authenticated users to obtain product information via a crafted HTTP request parameter...

CVE-2015-8991

CVE-2015-8991 concerns Intel/MCAfee Security Scan Plus (MSS+) prior to version 3.11.266.3. The vulnerability is a malicious file execution flaw that can be triggered during installation or uninstallation by preexisting crafted malware, while normal operation remains unaffected. The OpenVAS entry ...

CVE-2016-8021

CVE-2016-8021 affects McAfee VirusScan Enterprise for Linux (VSEL) 2.0.3 and earlier. The vulnerability is in the web interface’s verification of cryptographic signatures, allowing a remote authenticated attacker to spoof the update server and execute arbitrary code via a crafted input file. Impa...

CVE-2016-8022

Authentication bypass by spoofing vulnerability in Intel Security VirusScan Enterprise Linux VSEL 2.0.3 and earlier allows remote unauthenticated attacker to execute arbitrary code or cause a denial of service via a crafted authentication cookie...

CVE-2016-8016

Information exposure in Intel Security VirusScan Enterprise Linux VSEL 2.0.3 and earlier allows authenticated remote attackers to obtain the existence of unauthorized files on the system via a URL parameter...

CVE-2016-8023

Authentication bypass by assumed-immutable data vulnerability in Intel Security VirusScan Enterprise Linux VSEL 2.0.3 and earlier allows remote unauthenticated attacker to bypass server authentication via a crafted authentication cookie...

CVE-2016-8016

CVE-2016-8016 affects McAfee VirusScan Enterprise for Linux (VSEL) 2.0.3 and earlier. The vulnerability is an information disclosure via the web interface: an authenticated remote attacker can use a URL parameter to determine the existence of unauthorized files on the system. Connected sources al...

CVE-2013-7460

CVE-2013-7460 is a vulnerability in McAfee Application Control (MAC) 6.1.0 for Linux and earlier that enables write protection and an execution bypass. Authenticated users can change binaries that are part of the Application Control whitelist and allow execution of binaries under specific conditi...